CVEvulnerability

CVE-2011-4311

5.0 MEDIUM Published 2011-11-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-11-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified vectors.

Affected configurations

• montala resourcespace (<= 4.2.2816) • montala resourcespace 2.2.1240 • montala resourcespace 2.3.1374 • montala resourcespace 3.0.1490 • montala resourcespace 3.1.1557 • montala resourcespace 3.2.1651 • montala resourcespace 3.3.1723 • montala resourcespace 3.4.1794 • montala resourcespace 3.5.1857 • montala resourcespace 3.6.2022 • montala resourcespace 3.7.2088 • montala resourcespace 3.8.2144 • montala resourcespace 3.9.2269 • montala resourcespace 4.0.2429 • montala resourcespace 4.1.2567

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References